Re: Catalog permissions

From: BRUNO CESAR BERNARDES <bruno(dot)bernardes(at)embrapa(dot)br>
To: gilberto castillo <gilberto(dot)castillo(at)etecsa(dot)cu>
Cc: pgsql-admin(at)postgresql(dot)org
Subject: Re: Catalog permissions
Date: 2015-04-01 18:44:21
Message-ID: 1809816788.15318923.1427913861185.JavaMail.root@embrapa.br
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-admin

Dear Gilberto,

No. I am not using PgAdmin3, I am using PgPHPAdmin and I could not find a similar option on it.
To solve my problem the best thing would be restrict the Postgres catalog to the objects that the user has permission.

Saludos,
Bruno

----- Mensagem original -----

De: "Gilberto Castillo" <gilberto(dot)castillo(at)etecsa(dot)cu>
Para: "BRUNO CESAR BERNARDES" <bruno(dot)bernardes(at)embrapa(dot)br>
Cc: pgsql-admin(at)postgresql(dot)org
Enviadas: Terça-feira, 31 de março de 2015 12:59:11
Assunto: Re: [ADMIN] Catalog permissions

> Hi,
>
> I have to allow one user to use my Postgres installation in one schema of
> several. We are preparing an phpPGAdmin installation to give an remote
> access to this schema.
> The phpPDAdmin is showing the entire catalog to this user and allowing
> access only in the schema that I gave permissions to him.
> How do I do to this user can see only the schema that he has access, not
> the entire catalog.
> Is it possible?

Use:

GRANT usage on schema zzz to uuu;
Alter user uuu set default_transaction_read_only = on;
GRANT select on all tables in schema zzz to uuu;

Saludos,
Gilberto Castillo
ETECSA, La Habana, Cuba

---
This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running at host imx3.etecsa.cu
Visit our web-site: <http://www.kaspersky.com>, <http://www.viruslist.com>

--
Sent via pgsql-admin mailing list (pgsql-admin(at)postgresql(dot)org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-admin

--

Bruno César Bernardes, Analista
Coordenadoria de Gestão de Infraestrutura
Departamento de Tecnologia da Informação (DTI)
Empresa Brasileira de Pesquisa Agropecuária (Embrapa)
Brasília/DF

bruno(dot)bernardes(at)embrapa(dot)br
Telefone: +55 (61) 3448-1637 | Fax: +55 (61) 3448-4313
www.embrapa.br | twitter.com/embrapa
Confira também: www.facebook.com/agrosustentavel

________________________________________________________________________
____
Aviso de confidencialidade

Esta mensagem da Empresa Brasileira
de Pesquisa Agropecuaria (Embrapa),
empresa publica federal regida pel
o disposto na Lei Federal no. 5.851, de
7 de dezembro de 1972, e envia
da exclusivamente a seu destinatario e pode
conter informacoes confidenc
iais, protegidas por sigilo profissional. Sua
utilizacao desautorizada
e ilegal e sujeita o infrator as penas da lei. Se
voce a recebeu indevid
amente, queira, por gentileza, reenvia-la ao emitente,
esclarecendo o equi
voco.

Confidentiality note

This message from Empresa Brasileira d
e Pesquisa Agropecuaria (Embrapa), a
government company established und
er Brazilian law (5.851/72), is directed
exclusively to its addressee
and may contain confidential data, protected
under professional secrecy
rules. Its unauthorized use is illegal and may
subject the transgresso
r to the law's penalties. If you are not the addressee,
please send it bac
k, elucidating the failure.

In response to

Responses

Browse pgsql-admin by date

  From Date Subject
Next Message Gilberto Castillo 2015-04-01 18:49:29 Re: Restoring normal master-slave roles after replication failure
Previous Message BRUNO CESAR BERNARDES 2015-04-01 18:42:56 Re: Catalog permissions